Data Protection Consultant

EJADA; Riyadh; On-site; SAR 240,000 - 420,000; Full time

Job summary

EJADA in Riyadh is seeking an experienced Data Protection Consultant to advance our privacy program. The role focuses on ensuring regulatory compliance, conducting privacy assessments, and implementing governance frameworks across the organization.

The ideal candidate will have 6+ years in data protection, strong knowledge of GDPR/CCPA and Saudi privacy considerations, and demonstrated ability to lead privacy initiatives with IT, security, and legal teams.

Qualifications

• Must have strong knowledge of data protection laws and governance
• Experience with privacy risk assessments and control design
• Proven ability to manage privacy programs and cross‑functional collaboration

Responsibilities

• Develop, implement, and maintain data protection and privacy frameworks across the organization
• Ensure compliance with data protection regulations and industry standards
• Conduct PIAs and DPIAs
• Identify and mitigate privacy risks across processes, systems, and projects
• Review processes to apply privacy-by-design principles
• Support data classification, retention, and handling initiatives
• Develop privacy policies and governance documentation
• Collaborate with legal, IT, and security teams on privacy initiatives
• Handle data subject requests and privacy inquiries
• Deliver privacy awareness trainings and awareness sessions
• Monitor regulatory changes and advise on compliant practices
• Support audits and regulatory reviews

Skills

Privacy governance

Regulatory compliance

Risk assessment

Stakeholder management

PIA/DPIA

Education

Bachelor's degree in Data Privacy, Information Security, Cybersecurity, IT, Law, or related field

CIPP / CIPM / CDPSE / ISO 27701 certifications

Job description

We are seeking an experienced Data Protection Consultant to support and enhance organizational data privacy and protection programs. The role is responsible for ensuring compliance with applicable data protection regulations, assessing privacy risks, implementing governance frameworks, and advising stakeholders on privacy best practices. The ideal candidate will possess strong expertise in data privacy regulations, risk management, and data protection strategies.

Key Accountabilities:

• Develop, implement, and maintain data protection and privacy frameworks across the organization.
• Ensure compliance with applicable data protection regulations and industry standards.
• Conduct Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).
• Identify, assess, and mitigate privacy and data protection risks.
• Review business processes, systems, and projects to ensure privacy-by-design principles are applied.
• Support data classification, retention, and data handling initiatives.
• Develop and maintain privacy policies, procedures, and governance documentation.
• Collaborate with business units, legal teams, IT, and security teams on data privacy initiatives.
• Manage and respond to data subject requests and privacy-related inquiries.
• Deliver awareness sessions and training programs related to data privacy and protection.
• Monitor changes in privacy regulations and provide recommendations to maintain compliance.
• Support audits, compliance assessments, and regulatory reviews.

Minimum Qualifications:

• Bachelor’s degree in Data Privacy, Information Security, Cybersecurity, Information Technology, Law, or a related field.
• Professional certifications such as CIPP, CIPM, CDPSE, ISO 27701, or related certifications are preferred.
• 6+ years of experience in Data Protection, Data Privacy, Governance, Risk, or Compliance.
• Proven experience in establishing and managing data privacy programs.
• Experience working with data protection regulations and compliance frameworks.
• Experience conducting privacy assessments and risk management activities.

Job-Specific Skills:

• Strong knowledge of data protection and privacy regulations, including GDPR, CCPA, and other applicable privacy laws.
• Experience with data privacy governance frameworks and compliance programs.
• Familiarity with data privacy technologies, tools, and monitoring solutions.
• Knowledge of data lifecycle management, data classification, and retention practices.
• Understanding of information security principles and data protection controls.
• Strong risk assessment and problem-solving skills.
• Excellent communication and stakeholder management abilities.
• Ability to prepare policies, procedures, standards, and compliance reports.
• Experience conducting privacy audits, gap assessments, and compliance reviews.
• Ability to work independently and collaborate effectively with cross-functional teams.
• Strong analytical, documentation, and presentation skills.
• Proficiency in Microsoft Office tools and reporting platforms.